Data Security

Authorize Bulk Data Exports as Sensitive Actions

An application may correctly authorize every page and API request yet still expose too much data through an export feature. The common mistake is treating “can read this data” and “can copy a large collection of this data” as the same security decision. They are not necessarily equivalent. A support agent who may view customer records one at a time might not need permission to download the entire customer directory. A project member who can inspect documents in a workspace might not be allowed to export documents from other workspaces. Even when every exported row is individually readable, collecting thousands of rows into one portable file changes the impact of a mistake or compromised account.